5.5 Troubleshooting

If you encounter problems with the installation process, try these troubleshooting steps. If they do not work, contact Novell Support. Your Novell representative will work through any setup and configuration problems you might have.

ISSUE

SUGGESTED ACTIONS

You want to modify the User Application configuration settings made during installation. This includes configuration of such things as:

  • Identity Vault connections and certificates

  • E-mail settings

  • Metadirectory User Identity, User Groups

  • iChain settings

You can run the configuration utility independent of the installer.

On Linux , run this command from the installation directory (by default, /home/user/novell/idm):

configupdate.sh

On Windows, run this command from the installation directory (by default, c:\novell\idm):

configupdate.bat

Exceptions thrown when JBoss starts up, with the log message “port 8080 already in use.”

Shut down any instances of Tomcat (or other server software) that might already be running. If you decide to reconfigure JBoss to use a port other than 8080, remember to edit the config settings for the User Application Driver in iManager.

You see a message that no trusted certificates were found when JBoss starts.

Make sure you start JBoss using the JRE installed with the User Application.

Can’t log into portal admin page.

Make sure the User Application administrator account exists. Don’t confuse this with your iManager admin account. They are two different admin objects.

Can log into as admin, but can’t create new users.

The User Application Administrator must be a trustee of the top container and needs to have Supervisor rights. As a stopgap, you can try setting the User Application’s Administrator’s rights equivalent to the LDAP administrator’s rights (using iManager).

When starting JBoss, there are MySQL connection errors.

Don’t run as root.

Make sure MySQL is running (and that the correct copy is running). Kill any other instances of MySQL. Run /idm/mysql/start-mysql.sh, then /idm/start-jboss.sh.

Examine /idm/mysql/setup-mysql.sh in a text editor and correct any values that appear suspicious. Then run the script, and run /idm/start-jboss.sh.

You encounter keystore errors when starting the JBoss application server

Your JBoss application server is not using the JRE installed by the User Application installation program which uses the default path:

/idm/jre/lib/security/cacerts

Use the keytool command to import the certificate file:

keytool -import -trustcacerts -alias aliasName -file certFile -keystore ..\lib\security\cacerts -storepass changeit
  • Replace aliasName with a unique name of your choice for this certificate.

  • Replace certFile with the full path and name of your certificate file.

  • The default keystore password is changeit (if you have a different password, specify it).